ABSTRACT 

The present system allows disparate secure applications to communicate directly with one 
another in a heterogeneous application environment by providing for the creation of tokens that can 
be passed between the applications without human intervention. Security information is passed 
between applications in the form of a token with a string data type. Since a string is a primitive 
data type, it can be recognized by a large number of applications and interfaces. The token has no 
header and therefore no application-specific header configuration, making it platform and 
technology independent. This eliminates the need for conversion of security information between 
different formats. The use of tokens also eliminates the need for an application to be authenticated 
and authorized every time it sends a message to another application. Instead of a permanent 
context or session, a context is created with every invocation from one application to another. 
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